- MD-102 requires a score of 700 or greater across five domains in a 100-minute proctored session.
- Manage and maintain devices stays the largest domain at 25-30% of exam content.
- A new domain on automation, monitoring, and reporting takes effect July 24, 2026.
- The U.S. exam fee is $165, delivered through Pearson VUE at test centers or online.
What the MD-102 Certification Actually Covers
The Microsoft 365 Certified: Endpoint Administrator Associate credential is earned by passing Exam MD-102, Microsoft's assessment of a candidate's ability to plan, deploy, and secure endpoints across an organization. This is not a theoretical badge - it validates hands-on comfort with Microsoft Intune, Microsoft Entra ID, Windows Autopilot, Defender for Endpoint, Windows 365, PowerShell, Microsoft Graph, and increasingly, agentic tools and workflows built into modern endpoint management platforms.
There are no formal prerequisites to sit the exam, but Microsoft's own audience profile assumes practical experience managing devices in a production environment. If you've never touched a compliance policy in Intune or scripted a device configuration with PowerShell, the exam will feel abstract no matter how much theory you memorize. For a full breakdown of what "qualified" means before you register, the MD-102 Requirements 2026 guide walks through eligibility in more detail.
Exam Format, Delivery, and Registration Mechanics
Microsoft administers MD-102 through Pearson VUE, which offers both physical test-center appointments and online-proctored delivery from home or office. Candidates get 100 minutes to complete the exam, and the proctored version may include interactive question types rather than only multiple choice - think drag-and-drop configuration steps, ordered task sequences, or scenario-based simulations that mirror actual Intune console workflows.
A passing score is 700 or greater on Microsoft's scaled scoring model. The U.S. list price is $165, with regional pricing applied in other markets. Because pricing, vouchers, and potential exam replay bundles can change how much you actually pay out of pocket, it's worth reviewing the MD-102 Certification Cost 2026 breakdown before you book a date. If you're still nailing down exactly what number you need to hit on test day, the MD-102 Passing Score guide explains how the 700 threshold is applied across question types.
Key Takeaway
Book your MD-102 seat only after you can complete an Intune-based scenario end-to-end without reference material - the interactive question format punishes memorization without hands-on fluency.
The Five MD-102 Exam Domains
Effective July 24, 2026, Microsoft's skills-measured outline for MD-102 expands to five domains, adding a dedicated section on automation and monitoring. Here is how the weighting breaks down:
| Domain | Weight |
|---|---|
| Prepare infrastructure for devices | 20-25% |
| Manage and maintain devices | 25-30% |
| Protect devices | 15-20% |
| Manage and secure applications | 15-20% |
| Optimize endpoint operations by using automation, monitoring, and reporting | 10-15% |
Domain 1: Prepare Infrastructure for Devices (20-25%)
Covers tenant setup for endpoint management, Microsoft Entra ID join and hybrid join scenarios, and the enrollment prerequisites that determine whether a device can be managed at all.
- Windows Autopilot deployment profiles and device registration
- Entra ID device configuration and enrollment restrictions
- Role-based access control for endpoint administrators
Domain 2: Manage and Maintain Devices (25-30%)
The largest single domain, focused on the operational reality of keeping a fleet of Windows, mobile, and virtual devices compliant and current.
- Compliance policies, configuration profiles, and update rings in Intune
- Windows 365 Cloud PC provisioning and lifecycle management
- Monitoring device health and remediating enrollment failures
Domain 3: Protect Devices (15-20%)
Ties endpoint management to security posture, requiring familiarity with Defender for Endpoint alongside Intune-native controls.
- Endpoint security policies and attack surface reduction rules
- Conditional access integration for device-based risk signals
- Defender for Endpoint onboarding and remediation actions
Domain 4: Manage and Secure Applications (15-20%)
Application lifecycle from deployment through protection, including scenarios where corporate data must be isolated from personal apps.
- App deployment, assignment, and supersedence in Intune
- App protection policies and mobile application management without enrollment
- PowerShell and Microsoft Graph scripting for app management at scale
Domain 5: Optimize Endpoint Operations Using Automation, Monitoring, and Reporting (10-15%)
The newest domain, reflecting how much of modern endpoint administration now runs through scripted automation and agentic workflows rather than manual console clicks.
- Automating repetitive tasks with PowerShell and Microsoft Graph
- Building and interpreting Intune and Defender reporting dashboards
- Applying agentic tools to streamline recurring administrative workflows
For a deeper, exam-objective-by-objective walkthrough of each area - including which subtopics tend to show up as scenario questions versus straightforward recall - see the MD-102 Exam Domains 2026 guide. If you're trying to gauge realistically how tough the transition to five domains makes the exam, the How Hard Is the MD-102 Exam guide addresses that directly.
Who Pursues MD-102 and Who Hires For It
MD-102 sits squarely in the IT operations and infrastructure track. Organizations running Microsoft 365 at any real scale need someone accountable for enrolling, securing, and troubleshooting the devices employees use every day - that's the role this certification maps to. Typical titles built around this skill set include endpoint administrator, desktop support engineer, systems administrator, and Intune/device management specialist.
Because the exam blueprint explicitly covers Windows Autopilot, Defender for Endpoint, and Windows 365, employers use MD-102 as a proxy for "this person can manage our device fleet without hand-holding from day one." Hiring managers scanning resumes for Microsoft 365 stack experience treat the credential as a shortcut past lengthy technical screening. Browse current openings that reference this exact certification on the MD-102 Jobs page to see how the skill set translates into real listings.
Building a Domain-Aware Preparation Plan
Generic study advice - flashcards, timed drills, spaced review - only helps if it's pointed at the right domain in the right order. Because Manage and Maintain Devices carries the most weight, it deserves the most calendar time, not an equal split across all five domains. The newer Optimize Endpoint Operations domain also deserves deliberate attention since it's less likely to be covered by older study material still circulating online.
Infrastructure Foundations
- Configure Entra ID join, hybrid join, and Autopilot profiles in a test tenant
- Map enrollment restrictions to real organizational scenarios
Core Device Management
- Build compliance policies and update rings across device types
- Provision and manage a Windows 365 Cloud PC end to end
Protection and Applications
- Onboard Defender for Endpoint and test attack surface reduction rules
- Deploy apps with protection policies for unenrolled devices
Automation and Full Review
- Write PowerShell and Graph scripts for recurring admin tasks
- Take timed practice questions and revisit weak domains before scheduling
If you want a structured, week-by-week version of this approach with more granular checkpoints, the MD-102 Study Guide 2026 expands on exactly this framework. Once your fundamentals are solid, running full-length timed sets on our MD-102 practice test platform is the fastest way to find out which domain still needs work before you spend $165 on an actual attempt.
Key Takeaway
Spend your final review week almost entirely on practice questions rather than notes - the interactive question format rewards recognizing scenario patterns, not re-reading definitions.
Retake Rules and Annual Renewal
Microsoft's retake policy for MD-102 is straightforward but worth planning around before you book your first attempt. After a first failed attempt, you must wait 24 hours before retaking the exam. Every subsequent failed attempt requires a 14-day wait. Across any 12-month period, candidates are limited to five total attempts.
Once you pass, the Endpoint Administrator Associate credential doesn't expire quietly - it renews every 12 months through a free Microsoft Learn renewal assessment, meaning there's no recurring $165 fee just to keep the certification active. That renewal cadence also means the underlying exam content, including domain weightings, can shift between your original pass and your renewal window, so it's worth periodically checking the current exam domains breakdown even after you're certified.
If your timeline is tight around the July 24, 2026 change to the skills-measured outline, review the MD-102 Exam Dates 2026 guide before registering, since scheduling on either side of that date changes which domain structure you're tested against.
Frequently Asked Questions
Microsoft requires a scaled score of 700 or greater to pass Exam MD-102 and earn the Microsoft 365 Certified: Endpoint Administrator Associate credential.
You have 100 minutes to complete the exam, delivered by Pearson VUE either at a physical test center or through online proctoring. The proctored version may include interactive, scenario-based question types.
No formal prerequisites exist. Microsoft does expect hands-on experience with Intune, Entra ID, Autopilot, Defender for Endpoint, Windows 365, PowerShell, and Microsoft Graph even though nothing blocks registration without it.
The U.S. exam fee is $165, with regional pricing elsewhere. The certification itself renews every 12 months at no cost via a Microsoft Learn renewal assessment, so there's no recurring exam fee to stay certified.
You must wait 24 hours before your second attempt. Any attempt after that requires a 14-day wait, and you're limited to five total attempts within any 12-month period.